diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-02-09 14:22:12 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-02-09 17:17:09 +0100 |
| commit | 1d88016efc8b1426bd30fa6cfc3c519f88d32ebc (patch) | |
| tree | b2eb2292f2d0560da8dbbb395397d0666738a524 /src/evaluate.c | |
| parent | 2f89bc258e6e06ec4eeccc9efa52f01b4118e359 (diff) | |
evaluate: incorrect usage of stmt_binary_error() in reject
Don't pass ctx->pctx.protocol[PROTO_BASE_LL_HDR] to stmt_binary_error(),
it's not useful for the error reporting as location is not available.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/evaluate.c')
| -rw-r--r-- | src/evaluate.c | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/evaluate.c b/src/evaluate.c index 030bbde4..782a5bca 100644 --- a/src/evaluate.c +++ b/src/evaluate.c @@ -2729,9 +2729,8 @@ static int stmt_evaluate_reject_bridge(struct eval_ctx *ctx, struct stmt *stmt, desc = ctx->pctx.protocol[PROTO_BASE_LL_HDR].desc; if (desc != &proto_eth && desc != &proto_vlan && desc != &proto_netdev) - return stmt_binary_error(ctx, - &ctx->pctx.protocol[PROTO_BASE_LL_HDR], - stmt, "unsupported link layer protocol"); + return __stmt_binary_error(ctx, &stmt->location, NULL, + "cannot reject from this link layer protocol"); desc = ctx->pctx.protocol[PROTO_BASE_NETWORK_HDR].desc; if (desc != NULL && |